nongnu: firefox-esr: Update to 153.0esr [security fixes].

Fixes CVE-2026-15718, CVE-2026-15719, CVE-2026-16349, CVE-2026-16350,
CVE-2026-16351, CVE-2026-16352, CVE-2026-16353, CVE-2026-16354,
CVE-2026-16355, CVE-2026-16356, CVE-2026-16357, CVE-2026-16358,
CVE-2026-16359, CVE-2026-16360, CVE-2026-16361, CVE-2026-16362,
CVE-2026-16363, CVE-2026-16368, CVE-2026-16369, CVE-2026-16371,
CVE-2026-16374, CVE-2026-16375, CVE-2026-16377, CVE-2026-16379,
CVE-2026-16381, CVE-2026-16383, CVE-2026-16387, CVE-2026-16390,
CVE-2026-16391, CVE-2026-16396, CVE-2026-16405, CVE-2026-16412.

* nongnu/packages/mozilla.scm (firefox-esr): Update to 153.0esr.
[source]<patches>: Remove -esr, -ge-138 from patch names.  Sort.
[inputs]: Use icu4c-78, clang-19, rust-cbindgen-0.29.4.
(rust-cbindgen-0.29.4): New variable.
(firefox)[source]<patches>: Remove -ge-138 from patch name.
[inputs]: Drop icu4c replacement.
* nongnu/packages/patches/firefox-ge-138-compare-paths.patch: Rename from
this...
* nongnu/packages/patches/firefox-compare-paths.patch: ... to this.
* nongnu/packages/patches/firefox-esr-add-store-to-rdd-allowlist.patch,
nongnu/packages/patches/firefox-esr-use-system-wide-dir.patch: Delete files.
* nongnu/packages/wasm.scm (wasm32-wasi-clang-runtime): Inherit from
clang-runtime-19.
[native-inputs]: Use clang-19.
[inputs]: Use llvm-19.
(wasm32-wasi-clang) [base]: Use llvm-19.  Drop #:patches.
(wasm32-wasi-libcxx) [version]: Use llvm-19.
[arguments]<#:configure-flags>: Add -DLIBCXXABI_USE_LLVM_UNWINDER=OFF.

Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>

1 files changed, 10 insertions, 13 deletions

diff --git a/nongnu/packages/mozilla.scm b/nongnu/packages/mozilla.scm
index 085d65f..4f97cec 100644
--- a/nongnu/packages/mozilla.scm
+++ b/nongnu/packages/mozilla.scm
@@ -88,25 +88,25 @@
 
 ;; Update this id with every firefox update to its release date.
 ;; It's used for cache validation and therefore can lead to strange bugs.
-(define %firefox-esr-build-id "20260720102539")
+(define %firefox-esr-build-id "20260720102245")
 
 (define-public firefox-esr
   (package
     (name "firefox-esr")
-    (version "140.13.0esr")
+    (version "153.0esr")
     (source
      (origin
        (method url-fetch)
        (uri (string-append "https://archive.mozilla.org/pub/firefox/releases/"
                            version "/source/firefox-" version ".source.tar.xz"))
        (sha256
-        (base32 "00adf648nrhzngb4ssx31l17bh4zym491mx7b8ca3g9ajk39sfzm"))
+        (base32 "1dbcc80wq1354pzy6wg17gm81qiddyf5b3384fva865ivkgdkqyv"))
        (patches
         (nongnu-patches
+         "firefox-add-store-to-rdd-allowlist.patch"
+         "firefox-compare-paths.patch"
          "firefox-restore-desktop-files.patch"
-         "firefox-ge-138-compare-paths.patch"
-         "firefox-esr-use-system-wide-dir.patch"
-         "firefox-esr-add-store-to-rdd-allowlist.patch"))
+         "firefox-use-system-wide-dir.patch"))
        ;; XXX: 75 Mo (800+ Mo uncompressed) of unused tests.
        ;; Removing it makes it possible to compile on some systems.
        (modules '((guix build utils)))
@@ -460,7 +460,7 @@
         gtk+
         gtk+-2
         hunspell
-        icu4c-76
+        icu4c-78
         jemalloc
         libcanberra
         libevent
@@ -498,7 +498,7 @@
         alsa-lib
         autoconf-2.13
         `(,rust-firefox-esr "cargo")
-        clang-18
+        clang-19
         llvm
         wasm32-wasi-clang-toolchain
         m4
@@ -508,7 +508,7 @@
         pkg-config
         python
         rust-firefox-esr
-        rust-cbindgen-0.28
+        rust-cbindgen-0.29
         which
         yasm))
     (native-search-paths
@@ -543,7 +543,7 @@ Release (ESR) version.")
        (patches
         (nongnu-patches
          "firefox-restore-desktop-files.patch"
-         "firefox-ge-138-compare-paths.patch"
+         "firefox-compare-paths.patch"
          "firefox-use-system-wide-dir.patch"
          "firefox-add-store-to-rdd-allowlist.patch"))
        ;; XXX: 75 Mo (800+ Mo uncompressed) of unused tests.
@@ -557,9 +557,6 @@ Release (ESR) version.")
             (replace 'set-build-id
               (lambda _
                 (setenv "MOZ_BUILD_DATE" #$%firefox-build-id)))))))
-    (inputs
-     (modify-inputs inputs
-       (replace "icu4c" icu4c-78)))
     (native-inputs
      (modify-inputs native-inputs
        (replace "rust" rust-firefox)